setup-ts-deep-modules
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs dependency-cruiser as a devDependency using standard package managers like npm, pnpm, yarn, or bun. The dependency is a well-known, legitimate library for analyzing code dependencies.
- [COMMAND_EXECUTION]: The skill executes shell commands to install packages and runs the depcruise utility to verify rule enforcement. These actions are directly related to the skill's primary setup and verification functions.
- [INDIRECT_PROMPT_INJECTION]: The skill processes repository metadata and existing configuration files to detect the environment and merge settings. Ingestion points: pnpm-lock.yaml, yarn.lock, bun.lockb, and .dependency-cruiser.* config files. Boundary markers: None. Capability inventory: Package manager execution and depcruise CLI execution. Sanitization: None; assumes the repository contains valid configuration files.
Audit Metadata